ipchains with forwarding and disabling kazaa

The Jesus · 10-18-2002, 01:09 PM

I currently have forwarding available on ipchains for everything to get out through the firewall. I want to keep Kazaa (port 1214) from getting in or out. I have put rules to deny in all chains (input, output, forwarding) and still kazaa connects. If I disable forwarding kazaa stops working. That is great accept that nothing else works. I want to stay away from making special rules for everything else to get out. Please give me an idea as to why this is not working. Thanks in advance.

Mara · 10-18-2002, 01:13 PM

I gues you don't have all Kazaa ports blocked. Turn forwarding on, run tcpdump on the router and connect to Kazaa from one of the machines inside yur local network. Tcpdump will show you what ports were used.

The Jesus · 10-18-2002, 01:35 PM

i have done that and 1214 is the first port that it communicates with. Also all of the Kazaa forums say that 1214 is the port that needs to be opened in order for it to work.

tarballedtux · 10-18-2002, 06:49 PM

First of all INPUT and OUTPUT don't affect the KaZaA connections if the KaZaA connections are coming from the internal network. So what you must do is this. So make all DENY entries in the FORWARD chain. run tcpdump and find the ports it uses to connect like Mara said and then make entries in your firewall script to block the ports. Although since you can change what ports are used for KaZaA I would also make entries to block the servers that list where P2P peers are located.

--tarballedtux